Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
File: io0ZrTHISnSFawprPMEA5HorKqw.mft (raw, json)
Hash identifier: IFWrNStEjVtkS3mT+mkzPWdnspLDtHD1l8bQkgH0Oz0=
Subject key identifier: FF:C8:2A:AB:8F:6A:85:DA:A7:5C:CF:D0:92:13:86:AC:2A:E9:AD:E0
Authority key identifier: 8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
Certificate issuer: /CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Certificate serial: 01A0E32BBF2DF39B650FCD498ABB707B174A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
Manifest number: 0E6E
Signing time: Sun 27 Sep 2026 14:01:30 +0000
Manifest this update: Sun 27 Sep 2026 14:01:30 +0000
Manifest next update: Mon 28 Sep 2026 14:01:30 +0000
Files and hashes: 1: io0ZrTHISnSFawprPMEA5HorKqw.crl (hash: +5JfWlDePIM+9ReqXaoD2i9g+5UqmjrWbMOujocBLYw=)
2: quTJbQmG0wYBBRFhrjbNtJHrXMQ.roa (hash: QoyxpX44rQlyLQKQYNYLnT369J4osXzhEZfhimIdwCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:2b:bf:2d:f3:9b:65:0f:cd:49:8a:bb:70:7b:17:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Validity
Not Before: Sep 27 14:01:30 2026 GMT
Not After : Sep 28 14:01:30 2026 GMT
Subject: CN=ffc82aab8f6a85daa75ccfd0921386ac2ae9ade0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bb:94:44:39:59:f5:0b:b4:b5:fb:9d:05:d9:
d5:7f:17:27:74:b2:16:91:47:07:af:28:85:97:81:
12:b6:0d:76:ac:f6:74:ae:a7:6a:8c:97:a9:ad:c2:
88:0f:b2:a2:be:f8:12:bc:13:93:bf:12:0e:3e:1b:
fc:78:d1:18:3c:1c:b6:38:cc:ce:15:1a:ff:ca:70:
14:a4:c1:e6:19:74:74:19:9a:ca:96:c7:45:42:3d:
5c:ed:38:80:b7:c8:08:b4:d5:0d:de:19:61:cf:a8:
19:8f:c3:58:68:17:21:1f:41:cb:78:02:b1:e2:bc:
40:f8:93:8f:fb:46:63:58:81:b3:95:32:f7:9d:2d:
10:72:b5:7c:e8:d1:6a:0f:b8:37:01:57:6b:19:00:
d1:d7:01:5b:38:76:ff:b5:f6:1b:9b:8f:ba:27:c6:
a8:e9:b1:59:94:49:f7:55:fb:15:6d:20:f5:48:67:
aa:68:c8:fc:ca:fc:a6:79:92:bf:de:a5:3d:7d:20:
be:05:f9:88:e2:d4:9d:c2:8a:24:ca:07:93:bb:dc:
44:a1:f0:e9:ff:8f:91:62:e3:47:a9:c6:ff:a7:37:
57:b0:68:48:b4:95:22:bc:86:b9:3c:b0:db:f9:e0:
01:d6:98:af:f4:71:f5:a8:38:10:00:37:2d:bf:ab:
07:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C8:2A:AB:8F:6A:85:DA:A7:5C:CF:D0:92:13:86:AC:2A:E9:AD:E0
X509v3 Authority Key Identifier:
keyid:8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f6:4f:a7:1a:fe:3c:bf:21:6e:b5:d2:68:65:1a:f3:a2:2e:
eb:c6:72:0c:ad:8d:38:23:11:be:89:f4:93:67:69:22:5d:44:
13:52:dd:81:92:f6:24:41:2c:6b:95:0d:b7:28:ef:1b:0e:1c:
48:cf:a2:a1:7e:73:d8:1a:00:b8:29:75:65:cd:38:12:c9:a9:
03:06:4f:36:26:55:a0:57:3f:24:75:ae:ed:93:1e:40:79:2a:
91:e3:0d:51:b9:e8:a4:dd:be:ac:c7:42:be:a8:6c:de:11:2f:
93:50:15:a4:8d:b1:27:06:44:02:25:a1:f9:d1:de:29:6d:b8:
4a:92:68:fe:ce:8c:4c:df:7e:b2:c8:72:39:16:56:59:bc:76:
4a:fb:1e:1e:cc:d2:d8:74:1d:b4:e0:bc:b3:1d:af:96:40:b3:
dd:2c:36:59:80:d2:e2:2a:e6:60:82:8c:5d:76:48:78:fb:91:
f0:d6:63:92:11:de:21:09:b7:df:df:7c:d1:1c:a2:4d:75:21:
08:65:fe:95:0a:8a:39:a3:9a:2f:0b:2e:45:f6:ae:f3:8e:c6:
df:e3:8d:d3:1b:3b:a8:c9:39:ca:d4:c9:9d:2f:a8:6b:e3:df:
0f:2c:20:86:01:b3:44:31:b3:d5:3f:ba:45:60:ce:52:55:a8:
84:ab:ed:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDjK78t85tlD81JirtwexdKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhOGQxOWFkMzFjODRhNzQ4NTZiMGE2YjNjYzEwMGU0N2Ey
YjJhYWMwHhcNMjYwOTI3MTQwMTMwWhcNMjYwOTI4MTQwMTMwWjAzMTEwLwYDVQQD
EyhmZmM4MmFhYjhmNmE4NWRhYTc1Y2NmZDA5MjEzODZhYzJhZTlhZGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbuURDlZ9Qu0tfudBdnVfxcndLIW
kUcHryiFl4EStg12rPZ0rqdqjJeprcKID7KivvgSvBOTvxIOPhv8eNEYPBy2OMzO
FRr/ynAUpMHmGXR0GZrKlsdFQj1c7TiAt8gItNUN3hlhz6gZj8NYaBchH0HLeAKx
4rxA+JOP+0ZjWIGzlTL3nS0QcrV86NFqD7g3AVdrGQDR1wFbOHb/tfYbm4+6J8ao
6bFZlEn3VfsVbSD1SGeqaMj8yvymeZK/3qU9fSC+BfmI4tSdwookygeTu9xEofDp
/4+RYuNHqcb/pzdXsGhItJUivIa5PLDb+eAB1piv9HH1qDgQADctv6sHYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/IKquPaoXap1zP0JIThqwq6a3gMB8GA1UdIwQY
MBaAFIqNGa0xyEp0hWsKazzBAOR6KyqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW8wWnJUSElTblNGYXdwclBNRUE1SG9yS3F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mZjYzYTgtOTc0Yy00Y2NjLThjZDgt
MjQwMjM0MDNiYjBjLzEvaW8wWnJUSElTblNGYXdwclBNRUE1SG9yS3F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9mZjYzYTgtOTc0Yy00Y2NjLThjZDgtMjQwMjM0MDNiYjBj
LzEvaW8wWnJUSElTblNGYXdwclBNRUE1SG9yS3F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/ZPpxr+
PL8hbrXSaGUa86Iu68ZyDK2NOCMRvon0k2dpIl1EE1LdgZL2JEEsa5UNtyjvGw4c
SM+ioX5z2BoAuCl1Zc04EsmpAwZPNiZVoFc/JHWu7ZMeQHkqkeMNUbnopN2+rMdC
vqhs3hEvk1AVpI2xJwZEAiWh+dHeKW24SpJo/s6MTN9+sshyORZWWbx2SvseHszS
2HQdtOC8sx2vlkCz3Sw2WYDS4irmYIKMXXZIePuR8NZjkhHeIQm339980RyiTXUh
CGX+lQqKOaOaLwsuRfau847G3+ON0xs7qMk5ytTJnS+oa+PfDywghgGzRDGz1T+6
RWDOUlWohKvtSw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 21:20:11 2026 by rpki-client